topic routed interfaces in vsys1 and virtual wire config in vsys2 possible ? in General Topics

routed interfaces in vsys1 and virtual wire config in vsys2 possible ?

DatacenterNX — Tue, 05 Oct 2021 08:25:58 GMT

Hi all,

I've not found a conclusive answer in the config guide - although it stands to reason to assume the answer is "yes".

In a multi vsys environment can I have a regular deployment in vsys1 (i.e. routed interfaces acting as DGW for my secured vlans) and a bump_in_the wire (vwire) deployment in vsys2 on two dedicated interfaces?

Thanks in advance.

Rik

Re: routed interfaces in vsys1 and virtual wire config in vsys2 possible ?

S.Cantwell — Wed, 06 Oct 2021 00:02:19 GMT

@DatacenterNX yes, it goes to reason that you could use 2 vsys for that.

My question is why? There is more CPU load on the FW with processing the traffic with the 2 vsys.

I guess if you have a fast firewall, you may not notice this.

So my question is.. why cannot you have the 2 vsys interfaces in vsys1? I have many customers that mix/match L3 and Vwire in the same vsys. I am sure there is a logical reason, and inquiring minds want to know. 😛